Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,483All CVEsplus 19,164 rejected
- 614Last 24 hours4,923 in the last 7 days
- 18,768Last 30 days1,594 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 47 | 100 | 30 | 0 | 0 | 177 | 178 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-57117 | PraisonAI: Compute-bridged file tools allow shell command injectionPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57146 | PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by defaultPublic exploitMervinPraison · PraisonAI | High7.5 |
| CVE-2026-57144 | PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailablePublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57142 | PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yamlPublic exploitMervinPraison · PraisonAI | High7.8 |
| CVE-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIMervinPraison · PraisonAI | High8.1 |
| CVE-2026-57116 | PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57114 | PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingPublic exploitMervinPraison · PraisonAI | High7.2 |
| CVE-2026-57113 | PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionMervinPraison · PraisonAI | High8.1 |
| CVE-2026-56840 | PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-56838 | PraisonAI recipe.run_stream skips dangerous-tool policy enforcementPublic exploitMervinPraison · PraisonAI | High7.8 |
| CVE-2026-56837 | PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingMervinPraison · PraisonAI | High8.6 |
| CVE-2026-56836 | PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardPublic exploitMervinPraison · PraisonAI | High8.2 |
| CVE-2026-56835 | PraisonAI Slack app_mention bypasses configured user/channel authorizationPublic exploitMervinPraison · PraisonAI | High8.3 |
| CVE-2026-56834 | PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storagePublic exploitMervinPraison · PraisonAI | High7.5 |
| CVE-2026-56833 | PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalMervinPraison · PraisonAI | High7.5 |
| CVE-2026-56832 | PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57118 | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57143 | PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameterPublic exploitMervinPraison · praisonaiagents | High8.8 |
| CVE-2026-62176 | PraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationPublic exploitMervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-62179 | PraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesMervinPraison · praisonai-platform | Medium6.5 |
| CVE-2026-57147 | praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57148 | praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)Public exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57140 | PraisonAI AgentOS exposes unauthenticated agent listing and invocationMervinPraison · PraisonAI | Critical9.4 |
| CVE-2026-57139 | PraisonAI MCPServer exposes unauthenticated HTTP tools/callPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57133 | PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57135 | PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsPublic exploitMervinPraison · PraisonAI | High7.6 |
| CVE-2026-57134 | PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationPublic exploitMervinPraison · PraisonAI | High8.2 |
| CVE-2026-57138 | PraisonAI codeMode sandbox escape via Function constructorPublic exploitMervinPraison · PraisonAI | Critical9.9 |
| CVE-2026-57136 | PraisonAI SandboxExecutor allowedCommands bypass via shell chainingPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57137 | PraisonAI AgentLoop onToolCall approval runs after tool executionPublic exploitMervinPraison · PraisonAI | High8.8 |
| CVE-2026-57141 | PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57112 | PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsPublic exploitMervinPraison · PraisonAI | High8.3 |
| CVE-2026-57145 | PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationMervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-57132 | PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationPublic exploitMervinPraison · PraisonAI | High8.2 |
| CVE-2026-57131 | praisonai: Jobs API exposes agent-execution endpoints with no authenticationPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57124 | PraisonAI UI MCP connect endpoint allows unauthenticated local command executionPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-57122 | PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)MervinPraison · PraisonAI | High8.6 |
| CVE-2026-57127 | praisonai: recipe serve auth middleware silently disables itself when no secret is setPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-56839 | PraisonAI Code agent tools fail open without a workspace boundaryPublic exploitMervinPraison · PraisonAI | High7.3 |
| CVE-2026-57119 | PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIPublic exploitMervinPraison · PraisonAI | High7.5 |
| CVE-2026-57129 | PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalPublic exploitMervinPraison · praisonaiagents | High7.5 |
| CVE-2026-57126 | praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSPublic exploitMervinPraison · PraisonAI | High8.5 |
| CVE-2026-57120 | PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderPublic exploitMervinPraison · praisonaiagents | Medium6.5 |
| CVE-2026-57123 | PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inMervinPraison · praisonaiagents | Critical9.8 |
| CVE-2026-57130 | PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersPublic exploitMervinPraison · praisonaiagents | High8.1 |
| CVE-2026-57128 | PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointPublic exploitMervinPraison · PraisonAI | Medium4.3 |
| CVE-2026-57115 | PraisonAI: SpiderTools redirect-target SSRF protection bypassMervinPraison · PraisonAI | Medium6.5 |
| CVE-2026-57125 | PraisonAI: Unauthenticated RCE via Jobs API + Approval BypassPublic exploitMervinPraison · PraisonAI | Critical9.8 |
| CVE-2026-55536 | Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)Public exploitMervinPraison · PraisonAI | Critical9.1 |
| CVE-2026-55532 | PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverPublic exploitMervinPraison · PraisonAI | High7.6 |